NIS2 readiness, by the sector you supply
Since the Cyberbeveiligingswet took effect, regulated companies have to manage the security of their suppliers. The questionnaire a machine shop receives from a chemical plant is not the one a law firm receives from a bank. One page per sector: what is asked, what evidence looks like, and what to fix first.
Manufacturing and industrial suppliers
Component makers, contract manufacturers, installers and maintenance firms
What this sector is askedIndustryLogistics and transport suppliers
Carriers, warehousing, freight forwarders, fleet and telematics vendors
What this sector is askedIndustryIT and software suppliers
Managed service providers, software vendors, hosting and integration partners
What this sector is askedIndustryHealthcare suppliers
Medical device makers, health IT vendors, labs, care and facility suppliers
What this sector is askedIndustryProfessional services suppliers
Consultancies, accountants, law firms, engineering and recruitment firms
What this sector is asked Not sureRun the NIS2 scope check
Six questions, an indication in a minute, and the twelve-point checklist to download.
Start the checkThe four things that are always asked
- Email authentication: SPF, DKIM and a DMARC policy that stops spoofing
- Multi-factor authentication on email, remote access and admin accounts
- Backups with a dated, successful restore test
- A named security contact, a published security.txt and a one-page incident process
